DNSSEC Analyzer

Domain Name:

Time: 2021-05-11 01:25:45 UTC, NTP stratum 4

Analyzing DNSSEC problems for PKI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (864 bytes) ;; HEADER SECTION ;; id = 40796 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210522000000 20210501000000 20326 . KTOHq4gvmIC2KJOzZwQhHGonCSPCCEtX/453Ow6uauO3BjuoNp3Bdjh2BxEaHBQ5mvp+n/WjsrlQ dQvuf1BSZfVUJoOm3ofTQI6rRpex3rYxj8BYBjgSxYcRJniVP1nRnAozTspKfsm/bCUqB0RsnXWh 4tySxKv5fs8Ej7Eph9aG7JpIy7GuoqCxyAEKSJ6IOG8iTKtfInjg0zSF+ElRlr+K9MeCJxvsVeCP BR5BNWQ4EimmoMSCL7DfEzyHsKLau11nrDpx2jBih72PG6UmMohitJp+cCQz+C2qUSsiuME4olp9 X64P2CwkqY5T75GOmmVX+WJZsBd9xsuQkUuHTQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210522000000 20210501000000 20326 . KTOHq4gvmIC2KJOzZwQhHGonCSPCCEtX/453Ow6uauO3BjuoNp3Bdjh2BxEaHBQ5mvp+n/WjsrlQ dQvuf1BSZfVUJoOm3ofTQI6rRpex3rYxj8BYBjgSxYcRJniVP1nRnAozTspKfsm/bCUqB0RsnXWh 4tySxKv5fs8Ej7Eph9aG7JpIy7GuoqCxyAEKSJ6IOG8iTKtfInjg0zSF+ElRlr+K9MeCJxvsVeCP BR5BNWQ4EimmoMSCL7DfEzyHsKLau11nrDpx2jBih72PG6UmMohitJp+cCQz+C2qUSsiuME4olp9 X64P2CwkqY5T75GOmmVX+WJZsBd9xsuQkUuHTQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to h.root-servers.net for PKI.GOV/A
	Received 626 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (626 bytes) ;; HEADER SECTION ;; id = 30871 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . SjqaGxB7M4EuzOJoZBBRa8SbP3aTClssQ28CRZ7X6RbDSPw/kn5bbpKhgejbppKKb8u9bzMX6nrE g62bgNKSc+S4gzGjZDJ43j7t6BbU86Xkkbaubt7lDVTogSYIL1fe0+8hGSQm6+te37QYmIxU1iJP fsl8Sq1v84uvRAttkRVohWpg6FWVr/GmbndjB1J1PxM9mTaUVK8BNt95hFuVAHDyvdGRSXw2SJ7g 3Mvf4GUVzgMDnjIO9QGVDSoMzCmUxJ1jZLs6zkHT/XxbNI16osdmH8pdANxiyg3G45wlyidLy3Gr RJ6TZFc7A+PLbQ25wwKnSgi5EJrHWZGpILap7w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Received 625 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (625 bytes) ;; HEADER SECTION ;; id = 56840 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . SjqaGxB7M4EuzOJoZBBRa8SbP3aTClssQ28CRZ7X6RbDSPw/kn5bbpKhgejbppKKb8u9bzMX6nrE g62bgNKSc+S4gzGjZDJ43j7t6BbU86Xkkbaubt7lDVTogSYIL1fe0+8hGSQm6+te37QYmIxU1iJP fsl8Sq1v84uvRAttkRVohWpg6FWVr/GmbndjB1J1PxM9mTaUVK8BNt95hFuVAHDyvdGRSXw2SJ7g 3Mvf4GUVzgMDnjIO9QGVDSoMzCmUxJ1jZLs6zkHT/XxbNI16osdmH8pdANxiyg3G45wlyidLy3Gr RJ6TZFc7A+PLbQ25wwKnSgi5EJrHWZGpILap7w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Received 367 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (367 bytes) ;; HEADER SECTION ;; id = 47798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . SjqaGxB7M4EuzOJoZBBRa8SbP3aTClssQ28CRZ7X6RbDSPw/kn5bbpKhgejbppKKb8u9bzMX6nrE g62bgNKSc+S4gzGjZDJ43j7t6BbU86Xkkbaubt7lDVTogSYIL1fe0+8hGSQm6+te37QYmIxU1iJP fsl8Sq1v84uvRAttkRVohWpg6FWVr/GmbndjB1J1PxM9mTaUVK8BNt95hFuVAHDyvdGRSXw2SJ7g 3Mvf4GUVzgMDnjIO9QGVDSoMzCmUxJ1jZLs6zkHT/XxbNI16osdmH8pdANxiyg3G45wlyidLy3Gr RJ6TZFc7A+PLbQ25wwKnSgi5EJrHWZGpILap7w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . SjqaGxB7M4EuzOJoZBBRa8SbP3aTClssQ28CRZ7X6RbDSPw/kn5bbpKhgejbppKKb8u9bzMX6nrE g62bgNKSc+S4gzGjZDJ43j7t6BbU86Xkkbaubt7lDVTogSYIL1fe0+8hGSQm6+te37QYmIxU1iJP fsl8Sq1v84uvRAttkRVohWpg6FWVr/GmbndjB1J1PxM9mTaUVK8BNt95hFuVAHDyvdGRSXw2SJ7g 3Mvf4GUVzgMDnjIO9QGVDSoMzCmUxJ1jZLs6zkHT/XxbNI16osdmH8pdANxiyg3G45wlyidLy3Gr RJ6TZFc7A+PLbQ25wwKnSgi5EJrHWZGpILap7w== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 10914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to a.gov-servers.net for PKI.GOV/A
	Received 525 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (525 bytes) ;; HEADER SECTION ;; id = 43628 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI.GOV. 86400 IN NS dns2.PKI.GOV. PKI.GOV. 86400 IN NS dns1.PKI.GOV. PKI.GOV. 3600 IN DS 16306 8 1 02bdb53c8cdc6cc52df86a947dfcac10605c3e56 PKI.GOV. 3600 IN DS 56467 8 1 f5d462c2807b48f1b8dc2435f8fd43772b807d48 PKI.GOV. 3600 IN DS ( 16306 8 2 6b14d3cdc4db45fc4dfb99f43402538a275e5b521612bbf25f71c45c01d62f07 ) PKI.GOV. 3600 IN DS ( 56467 8 2 0d924e964467407aab83f6eadcbdda0f0e2a3a1fb74852b0546d0919e162e5d6 ) PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210517231008 20210510231008 48498 gov. R/VNdXyQ+OfJPgjeipTt3plcA8Cllj+Y2n8JyojUYUtHvK077G7cVGhQAdHkVUtHuOu6Dx8Pjpal GU5sjV/QIfjXK1ycnmHfuPiu7ktRNKmi4j9RYccr9tzMO61kHm029kk3jVAIRpHJjEnS3NnEcQEg t3jsetyNdhFIhOqsaA2t3E2NvaaDhU6nlKWatq4ZSKnlZIrqEfjoOLAwNFCk9A== ) ;; ADDITIONAL SECTION (5 records) dns2.PKI.GOV. 86400 IN A 199.167.93.100 dns2.PKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.PKI.GOV. 86400 IN A 199.167.92.100 dns1.PKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for PKI.GOV/DNSKEY
	Received 525 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (525 bytes) ;; HEADER SECTION ;; id = 12765 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI.GOV. 86400 IN NS dns2.PKI.GOV. PKI.GOV. 86400 IN NS dns1.PKI.GOV. PKI.GOV. 3600 IN DS 16306 8 1 02bdb53c8cdc6cc52df86a947dfcac10605c3e56 PKI.GOV. 3600 IN DS 56467 8 1 f5d462c2807b48f1b8dc2435f8fd43772b807d48 PKI.GOV. 3600 IN DS ( 16306 8 2 6b14d3cdc4db45fc4dfb99f43402538a275e5b521612bbf25f71c45c01d62f07 ) PKI.GOV. 3600 IN DS ( 56467 8 2 0d924e964467407aab83f6eadcbdda0f0e2a3a1fb74852b0546d0919e162e5d6 ) PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210517231008 20210510231008 48498 gov. R/VNdXyQ+OfJPgjeipTt3plcA8Cllj+Y2n8JyojUYUtHvK077G7cVGhQAdHkVUtHuOu6Dx8Pjpal GU5sjV/QIfjXK1ycnmHfuPiu7ktRNKmi4j9RYccr9tzMO61kHm029kk3jVAIRpHJjEnS3NnEcQEg t3jsetyNdhFIhOqsaA2t3E2NvaaDhU6nlKWatq4ZSKnlZIrqEfjoOLAwNFCk9A== ) ;; ADDITIONAL SECTION (5 records) dns2.PKI.GOV. 86400 IN A 199.167.93.100 dns2.PKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.PKI.GOV. 86400 IN A 199.167.92.100 dns1.PKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone PKI.GOV

PKI.GOV

	Checking DS between GOV and PKI.GOV
	Query to d.gov-servers.net for PKI.GOV/DS
	Received 399 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (399 bytes) ;; HEADER SECTION ;; id = 29918 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DS ;; ANSWER SECTION (5 records) PKI.GOV. 3600 IN DS 16306 8 1 02bdb53c8cdc6cc52df86a947dfcac10605c3e56 PKI.GOV. 3600 IN DS 56467 8 1 f5d462c2807b48f1b8dc2435f8fd43772b807d48 PKI.GOV. 3600 IN DS ( 16306 8 2 6b14d3cdc4db45fc4dfb99f43402538a275e5b521612bbf25f71c45c01d62f07 ) PKI.GOV. 3600 IN DS ( 56467 8 2 0d924e964467407aab83f6eadcbdda0f0e2a3a1fb74852b0546d0919e162e5d6 ) PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210517231008 20210510231008 48498 gov. R/VNdXyQ+OfJPgjeipTt3plcA8Cllj+Y2n8JyojUYUtHvK077G7cVGhQAdHkVUtHuOu6Dx8Pjpal GU5sjV/QIfjXK1ycnmHfuPiu7ktRNKmi4j9RYccr9tzMO61kHm029kk3jVAIRpHJjEnS3NnEcQEg t3jsetyNdhFIhOqsaA2t3E2NvaaDhU6nlKWatq4ZSKnlZIrqEfjoOLAwNFCk9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for PKI.GOV in the GOV zone
	DS=16306/SHA-1 has algorithm RSASHA256
	DS=56467/SHA-1 has algorithm RSASHA256
	DS=16306/SHA-256 has algorithm RSASHA256
	DS=56467/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210517231008 20210510231008 48498 gov. R/VNdXyQ+OfJPgjeipTt3plcA8Cllj+Y2n8JyojUYUtHvK077G7cVGhQAdHkVUtHuOu6Dx8Pjpal GU5sjV/QIfjXK1ycnmHfuPiu7ktRNKmi4j9RYccr9tzMO61kHm029kk3jVAIRpHJjEnS3NnEcQEg t3jsetyNdhFIhOqsaA2t3E2NvaaDhU6nlKWatq4ZSKnlZIrqEfjoOLAwNFCk9A== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=16306/SHA-1 is now in the chain-of-trust
	DS=56467/SHA-1 is now in the chain-of-trust
	`PKI.GOV. 3600 IN DS 16306 8 1 02bdb53c8cdc6cc52df86a947dfcac10605c3e56`
	`PKI.GOV. 3600 IN DS 56467 8 1 f5d462c2807b48f1b8dc2435f8fd43772b807d48`
	`PKI.GOV. 3600 IN DS ( 16306 8 2 6b14d3cdc4db45fc4dfb99f43402538a275e5b521612bbf25f71c45c01d62f07 )`
	`PKI.GOV. 3600 IN DS ( 56467 8 2 0d924e964467407aab83f6eadcbdda0f0e2a3a1fb74852b0546d0919e162e5d6 )`
	Query to dns1.PKI.GOV for PKI.GOV/DNSKEY
	Timeout querying dns1.PKI.GOV/199.167.92.100 for PKI.GOV/DNSKEY
	All Queries to dns1.PKI.GOV for PKI.GOV/DNSKEY timed out or failed
	Query to dns2.PKI.GOV for PKI.GOV/DNSKEY
	Received 2320 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2320 bytes) ;; HEADER SECTION ;; id = 39864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZfRaq2lVU7gqfv9DsqoWlmeiNKgdqpWQB6k9ZhjFpKNLT7wIR67LpsXFT+61SsW/inU3pnk JvfYPge2Q9B40FGlB0qGLZWYBvNsF8bHb8rCTE41GwJuORuNNEy4krqq6FT6xdq/oSOebgMqTXV+ xYbPmD0PJgfkAceo8+ix38rlleDORkszP1OONLjQ7vuC8WjccqvwvOO+rPgkU6BHoL7B9VMynW2v 6Z4h1/g2eHTd4C32zxCxHajtw3Zp3Fg2fS00t7SYOu+Y7zlhf6WaNCxyosloj+BHbS75iX7Uj0Vf v9pqlpSTQmA0ufjEvij3c0W1Vvw9q0pfZLKvM8ES+cU= ) ; Key ID = 16306 PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAdiqcWiPQGJo8+btbiuC8gMu6Jn+tzrFl+U4svrcXHfWF/VyXH7fzUg0L4rErNzTvNpd3Ulo HhrOYYQ3ztDxXjRNsxwrXHFR7f0XcRPn9gnzsGfzz9RXA6HqiYhVo/v+g7r/+Hza+Q1Zh0XiseTO wnJ0MVHRbp8j0C0wpID7obE5S0XyjYJR+TxhmEXXO0+FQlYSTyd0CsQqrkclQVCwHgzRdAWiAZfu fQ1Dvz+dLVV8TBbzU3Dh1BNSAriOQzuzaFKsjDy4Z3SmbjOgKl6I3sRSQZLcKZrr2lRUPoe1EkYu vKZHWHYXMUd60D5WNC/wtoa/XLjEXt93rMUNMrMCFsk= ) ; Key ID = 56467 PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZYU/NHhKg2XtF8nNlHhdhq7AXAzBEY6XAEBtH60jFCIPGFxHzT4fJCzqIxi1wHCyl5zo98b dGeNlcaG1F41tpUJQqgnkjPdoWyTmehidhOPrphQFfjbhZ7SpwvYWHsXGj9ey7CCh510FDgh9+h1 TjpE8ZBImlclS7GnfSuexOIoABmCVZZVhTifEF1cWW5cKxR4y4+I75PLW+C3IX1CrYk4AH7pBTq0 JFX+LQQA0v2hWD2rDUnlJZdGYdCquzccLN62kc7dRAS3zcxemqGZrPcfvqm0+9OdAZN9hQpx2gOL MvM3WHzEXkdCvi4o5J6sm3UoqkKcMwG3aSPbuziCYp8= ) ; Key ID = 1500 PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAazo8joWntSl+hFWpOED4h5yMNAw/LhnOzkV2Zx602BOODPf3+ezq3G73aVXT+tMY484bSAA Fwxok+Dut57JtcxZ3o2zdd1874OH1KQRltD2Z5wQVEzW2sOpV/bv8z2e+UaeQVmPRy6CxP3tUDys nig2Esx6/WJ+InSdvEvzD4PJH067YVgV2kveVdyOGC/PYjQ3/3LCgz+2S98lDASYZfIGQjlkzQts 55ck2vbwyURtem2T10Es6uk3y+TKjHuymACuvzuX7Q+aGMM1mfcQjheowdTftPXkWZGIdTmfEbMD 6FccJ22JGHlx2dlexyG8sIZRTFO6HXe7chxYJ2Ws7tU= ) ; Key ID = 16758 PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210517020015 20210510020015 16306 pki.gov. DCuLZ8owBbU+DkIAAcOAGnYC/19UlCWzNyr7U+2U76JKUdl2368TX6AWclUMokhnyP/usZwgrOKy IOAewQOJ27U+njvqWVasf73KfrpC/4eQe6u9au9+xVJ9VfIC5VQHtOeMDgdeWP/hsXDk2guP0kLf jiVxmpHkpPa6g6OZUIq1v+PGQCvPPdyRCEYPqtcOraMZVmJbOyzWevKdT79u7nOjgrrggwNFsTpz MvKPbRYDmmBD+9ks9Nab5gTQRWXBsIZWbLHX9Hz2q8hB+++evnfVFaBljusdOmJPncUXRnKr23wa q+1gL/8RPd5i48IWMfYwodMDPAYeC2Bf5WI4Cg== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210517020015 20210510020015 56467 pki.gov. BPbvDhyuyBMhIgPaN+5g7yYedxDRpNssJ+h/1Pewtm0aS2dot04nKSIsN8ZF5jo6TiR5F77MiNyF 5Av6LykUJas67oNhQyhfbM2OPsb9+oKpqxVvavdrQxy3rH91Hy4pUwEQeDpiZnpDyqe28lB9U0CN IMxWy36W8MLrIOurJ77Xr6SGdCr8UuuJTZUGV1NfQhu3AXSMRx1t6WAMrGqBxCbsw2nYO8AUqHYQ hYDy5iCohoUJS1m4tMNYwQKrxaPIR8k9Q79Ydv5kZu2j+35oyptHXt8EMYDhjCRR2ETss8+wRA/r lJDkG0XALTuyBQJ41eTtIIYNTF/JnJZfhDUEyg== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210517020015 20210510020015 1500 pki.gov. JCG6j/0AirK2NlCs03Xno92L3h/cn1Y+mdSonjJ01UVxFffZXiKSDVYC76jajYTDMsjge6hmZHa9 kP41iPI3BBoH1C+J4ybMntAlZhvwgu1ePMKPCzKd3pwJDxfEKAiS00YSnHQbK7to2YWzXMI7dUy+ AtUwQgo2C5LQLqjWxubFQtW5WDXci2F57gxY25xgro0XMpNdRN+L5E+EeDyBO2WTyYFleWIDNn3F Z7IVMJ9wgHScTLXX5oGdoLA2UA5nLmN0LO+rZ4Tou3bvwZLyL5T9OFFnwwM4VdCJkIveOAXm8ZUD R6GJUK8VF7nplXx+GyWiEVV7Mgd0ZdG1DtXVIA== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210517020015 20210510020015 16758 pki.gov. lbARSD0XOLJXCANQ5f9mBrhy+SlNz3sp7P3gX8SCktJ8piW9uz8xFpf4Q+TsCv/wBA8sNRRCDCqZ DCnBdURz7Ud0kZ7Rx4V4NwsautNMzrzs479bBrF6HJXG9t2lDHsVy8LRE8dbQ6dOraCvnnFnVgY/ FnzIeQdrWIivZJHgJUHpHrDHQpJfPW+iR2lfRodb92rcqyo9966f4qL/RmXZ2V8RO56Jw76tkB5S uVt75Bidl9+BiJ7JV4TAkRbjDBjfYu3xbEjM9/WND4FqZGuYiFBG3SodQ7N1gNL8hMrSqSEEaimt Vr2HkFwg3T9jRhU7usjD5SjQcHTMf+4CtjmSGQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for PKI.GOV
	`PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZfRaq2lVU7gqfv9DsqoWlmeiNKgdqpWQB6k9ZhjFpKNLT7wIR67LpsXFT+61SsW/inU3pnk JvfYPge2Q9B40FGlB0qGLZWYBvNsF8bHb8rCTE41GwJuORuNNEy4krqq6FT6xdq/oSOebgMqTXV+ xYbPmD0PJgfkAceo8+ix38rlleDORkszP1OONLjQ7vuC8WjccqvwvOO+rPgkU6BHoL7B9VMynW2v 6Z4h1/g2eHTd4C32zxCxHajtw3Zp3Fg2fS00t7SYOu+Y7zlhf6WaNCxyosloj+BHbS75iX7Uj0Vf v9pqlpSTQmA0ufjEvij3c0W1Vvw9q0pfZLKvM8ES+cU= ) ; Key ID = 16306`
	`PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAdiqcWiPQGJo8+btbiuC8gMu6Jn+tzrFl+U4svrcXHfWF/VyXH7fzUg0L4rErNzTvNpd3Ulo HhrOYYQ3ztDxXjRNsxwrXHFR7f0XcRPn9gnzsGfzz9RXA6HqiYhVo/v+g7r/+Hza+Q1Zh0XiseTO wnJ0MVHRbp8j0C0wpID7obE5S0XyjYJR+TxhmEXXO0+FQlYSTyd0CsQqrkclQVCwHgzRdAWiAZfu fQ1Dvz+dLVV8TBbzU3Dh1BNSAriOQzuzaFKsjDy4Z3SmbjOgKl6I3sRSQZLcKZrr2lRUPoe1EkYu vKZHWHYXMUd60D5WNC/wtoa/XLjEXt93rMUNMrMCFsk= ) ; Key ID = 56467`
	`PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZYU/NHhKg2XtF8nNlHhdhq7AXAzBEY6XAEBtH60jFCIPGFxHzT4fJCzqIxi1wHCyl5zo98b dGeNlcaG1F41tpUJQqgnkjPdoWyTmehidhOPrphQFfjbhZ7SpwvYWHsXGj9ey7CCh510FDgh9+h1 TjpE8ZBImlclS7GnfSuexOIoABmCVZZVhTifEF1cWW5cKxR4y4+I75PLW+C3IX1CrYk4AH7pBTq0 JFX+LQQA0v2hWD2rDUnlJZdGYdCquzccLN62kc7dRAS3zcxemqGZrPcfvqm0+9OdAZN9hQpx2gOL MvM3WHzEXkdCvi4o5J6sm3UoqkKcMwG3aSPbuziCYp8= ) ; Key ID = 1500`
	`PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAazo8joWntSl+hFWpOED4h5yMNAw/LhnOzkV2Zx602BOODPf3+ezq3G73aVXT+tMY484bSAA Fwxok+Dut57JtcxZ3o2zdd1874OH1KQRltD2Z5wQVEzW2sOpV/bv8z2e+UaeQVmPRy6CxP3tUDys nig2Esx6/WJ+InSdvEvzD4PJH067YVgV2kveVdyOGC/PYjQ3/3LCgz+2S98lDASYZfIGQjlkzQts 55ck2vbwyURtem2T10Es6uk3y+TKjHuymACuvzuX7Q+aGMM1mfcQjheowdTftPXkWZGIdTmfEbMD 6FccJ22JGHlx2dlexyG8sIZRTFO6HXe7chxYJ2Ws7tU= ) ; Key ID = 16758`
	DNSKEY=16306/SEP is now in the chain-of-trust
	DS=16306/SHA-1 verifies DNSKEY=16306/SEP
	DS=16306/SHA-256 verifies DNSKEY=16306/SEP
	DNSKEY=56467/SEP is now in the chain-of-trust
	DS=56467/SHA-1 verifies DNSKEY=56467/SEP
	DS=56467/SHA-256 verifies DNSKEY=56467/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210517020015 20210510020015 16306 pki.gov. DCuLZ8owBbU+DkIAAcOAGnYC/19UlCWzNyr7U+2U76JKUdl2368TX6AWclUMokhnyP/usZwgrOKy IOAewQOJ27U+njvqWVasf73KfrpC/4eQe6u9au9+xVJ9VfIC5VQHtOeMDgdeWP/hsXDk2guP0kLf jiVxmpHkpPa6g6OZUIq1v+PGQCvPPdyRCEYPqtcOraMZVmJbOyzWevKdT79u7nOjgrrggwNFsTpz MvKPbRYDmmBD+9ks9Nab5gTQRWXBsIZWbLHX9Hz2q8hB+++evnfVFaBljusdOmJPncUXRnKr23wa q+1gL/8RPd5i48IWMfYwodMDPAYeC2Bf5WI4Cg== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210517020015 20210510020015 56467 pki.gov. BPbvDhyuyBMhIgPaN+5g7yYedxDRpNssJ+h/1Pewtm0aS2dot04nKSIsN8ZF5jo6TiR5F77MiNyF 5Av6LykUJas67oNhQyhfbM2OPsb9+oKpqxVvavdrQxy3rH91Hy4pUwEQeDpiZnpDyqe28lB9U0CN IMxWy36W8MLrIOurJ77Xr6SGdCr8UuuJTZUGV1NfQhu3AXSMRx1t6WAMrGqBxCbsw2nYO8AUqHYQ hYDy5iCohoUJS1m4tMNYwQKrxaPIR8k9Q79Ydv5kZu2j+35oyptHXt8EMYDhjCRR2ETss8+wRA/r lJDkG0XALTuyBQJ41eTtIIYNTF/JnJZfhDUEyg== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210517020015 20210510020015 1500 pki.gov. JCG6j/0AirK2NlCs03Xno92L3h/cn1Y+mdSonjJ01UVxFffZXiKSDVYC76jajYTDMsjge6hmZHa9 kP41iPI3BBoH1C+J4ybMntAlZhvwgu1ePMKPCzKd3pwJDxfEKAiS00YSnHQbK7to2YWzXMI7dUy+ AtUwQgo2C5LQLqjWxubFQtW5WDXci2F57gxY25xgro0XMpNdRN+L5E+EeDyBO2WTyYFleWIDNn3F Z7IVMJ9wgHScTLXX5oGdoLA2UA5nLmN0LO+rZ4Tou3bvwZLyL5T9OFFnwwM4VdCJkIveOAXm8ZUD R6GJUK8VF7nplXx+GyWiEVV7Mgd0ZdG1DtXVIA== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210517020015 20210510020015 16758 pki.gov. lbARSD0XOLJXCANQ5f9mBrhy+SlNz3sp7P3gX8SCktJ8piW9uz8xFpf4Q+TsCv/wBA8sNRRCDCqZ DCnBdURz7Ud0kZ7Rx4V4NwsautNMzrzs479bBrF6HJXG9t2lDHsVy8LRE8dbQ6dOraCvnnFnVgY/ FnzIeQdrWIivZJHgJUHpHrDHQpJfPW+iR2lfRodb92rcqyo9966f4qL/RmXZ2V8RO56Jw76tkB5S uVt75Bidl9+BiJ7JV4TAkRbjDBjfYu3xbEjM9/WND4FqZGuYiFBG3SodQ7N1gNL8hMrSqSEEaimt Vr2HkFwg3T9jRhU7usjD5SjQcHTMf+4CtjmSGQ== )`
	RRSIG=16306 and DNSKEY=16306/SEP verifies the DNSKEY RRset
	RRSIG=56467 and DNSKEY=56467/SEP verifies the DNSKEY RRset
	RRSIG=1500 and DNSKEY=1500 verifies the DNSKEY RRset
	RRSIG=16758 and DNSKEY=16758 verifies the DNSKEY RRset
	DNSKEY=1500 is now in the chain-of-trust
	DNSKEY=16758 is now in the chain-of-trust
	Query to dns2.PKI.GOV for PKI.GOV/A
	Received 1356 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1356 bytes) ;; HEADER SECTION ;; id = 19056 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20210516022752 20210509022752 1500 pki.gov. clDheeS/cVlIcOAULu1W7/i4ExOgd6Bvrr4/l/6oDVkvFx1xUpP0ipy0JLR9oXGUHbeFjiwvzS3z Z/9IS+giG+iK/CV/ZdPFJToQaQPJ+pzn+vYdflrt0VXC+qgtJtsFTlBy+3F8Wb/+0Dwvu97sEq4d G8qD2Z9CuZSUPj0K0XHT9kNq3Fi0KR1EFsn2tr7x/lOXEy1hWinuJjDo++GxfgoVsKFtwSAxNRgu LkoXDX6cUtRcWneNUsQ1DvCPcdu0fKg9IXiAWDdT7uSbNR5BPKL+MGMSjDUJk6oVGdV9+yvdXv8I Ly/vutKkftGtOdLE9UDvPGu/VYII4zd2nVcPzg== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20210517020015 20210510020015 16758 pki.gov. oCjnSmVn6frGT8CzfgZUDLl0TN9YTefW1HBpazyLrNhQEswE5NhnHCTJ093udTiiXKiA1F5KLl08 ZmQ6KXOK8ulmLrVfHwZs0MzOQ1PA/abhkujnL/Zoyb9HPQu+85nOrkyq1gV9TwObOfTj93rtrO/m EbdeDbKGsx7XJUZBYL8hfUZlvkJd9/CBA7QPpulYVM7FXZ89H+vTy9BKdR9TnP6GL1/jTLN46uPu pgyCd0pvgGehA/YUp2waCKRcfC1Xdh6zqOwU/3VrCNToaPW4Ql+A6bH0yfdS1pKvNhu9TrH5y+CF E3YnT30k2bPU8w2OSe/3xO5y3E36egvFZmrYmQ== ) 5h7gfolm6aaoi2ncqq7l13b7kbmt9rgk.PKI.GOV. 86400 IN NSEC3 ( 1 0 1 1049192d82f9b981 5h7gfolm6aaoi2ncqq7l13b7kbmt9rgl NS SOA RRSIG DNSKEY NSEC3PARAM ) 5h7gfolm6aaoi2ncqq7l13b7kbmt9rgk.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20210516022752 20210509022752 1500 pki.gov. RF9Gss8AIcRUQfPPxTbqfNE6/1CpBUoREvzTJ9NoE5x4csSJruxBdBdOpA2W/mNYjevyoxs4L/DT U4B7jf8YnwMI31z8bhZBftPBi25iBTTzMKNVKEgevp9jeM7swI4FEH4wpwF7ylFLoPSKQIIKIpuo lcMtosrFltCEbi8X++9QsPMLYo3HEVFu2Q7qHX1NklOWdI2uGAPLaiPxBMaNd0TFZKNLbauZok0R eVLaElr22GTqOV5wulUugOg6FnxAKQ+uy6zbECX7VUV+7G5Hpic1A1skqDLMkHgjSPLJZj87rLHP Aju3tT+FXNCUdpEh/AG/TmGD2VQ9GAgGcmobvA== ) 5h7gfolm6aaoi2ncqq7l13b7kbmt9rgk.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20210517020015 20210510020015 16758 pki.gov. mU2Z7HRp+FIt3NBWsXYdl+l/2DzWHTV5OOdRoze041nOQC5CROT+aaW7CUvCvG+XcSXFxnsm2AB6 +zoA8sPfE6gx7E/kno/bWrCzUBivI/sX5I9tjDqY58jADbymI2zE+xC/rlUXv9LsvXZsY0w4iy3U 4buZUAWPIaYHNjhUSjZC8j8fQIAzss3vTEdCKm2wVMyFpT8y1dOEnWgzg/C7mWt4SCgopX4FOo3z /LSdeznQJ0WycQb79aIo0i+0Gl/dctm3SSA6KiEaMP2pERvD0Vsk3GJFjyb8k9aW2J0iu7pAwyZQ dBsZl0JmiUVN5mMXyPm2vXKzv+0cl1MIYAFAeg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.PKI.GOV is authoritative for PKI.GOV
	Found RRSIG signed by pki.gov zone
	Query to dns2.PKI.GOV for PKI.GOV/A
	Received 1356 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1356 bytes) ;; HEADER SECTION ;; id = 43652 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20210516042705 20210509042705 1500 pki.gov. atYo4vsOx4sSkygVbqFW4QV/8S4TrHS2CwMmYVA3bJioaPPIHPCgiSzU1XiQrcjaJP8KOGhukBSF 5I02T1hwhaOwe6ynnvUUIL46tYKkEhg8Y7licqq2+T8lECWMySi0vG9+npssMW0EnDHBkANWr/LF 8Rx4dkOgoWTaqoxjcTcVCyv1Y2YJAzjAAQyltK/L2E3khKubS1G3CfOQk2vohxHJ5CSco4sCj1QR uNHozs2xJTCwfwmQ5AL+PsPYxJeIBuOqVuNaAbSYgXG9zqXg3ykaYFCB/duk/bL2zoO/h9PuPsVU VnZR6BBshMEkk/3FelAz03WxlDAxJE8F0qjalg== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20210517015750 20210510015750 16758 pki.gov. LG/Ho/7PUjwDmFbW40tZo4AmkflFoc/oQwgl1+a2m8zW5+nCSpyNHsvWU9CeiFchuWXiJYXyqh5V zPmfT02NoAQAEGcDo0KtV+z7U92hUOCVnleuYVP9Cco/+u0s2TsD9svTLrcjmNt5c3gMFRVXjP7C y74d15bZwOlOVUjCZIQuGV4/HO6EDBJ1/G4NkquIA5WDGeuwuRVGgsKhWcFou42ORgEIlWQhMlTI mIa6EhOWrfk03rgVh39UVKv5SPJ19Ub6Q5Wl2xgUIbZFIM2ddnBGvSFnWCS2LIOa61B1lbHmjq0y cXZ2zyxBh0K8fdguBrxQ57sicHln14dCyWsuzg== ) lb75u4m58c2fbmgcccr6ds9pui8av9ah.PKI.GOV. 86400 IN NSEC3 ( 1 0 1 53f75088b1b3c278 lb75u4m58c2fbmgcccr6ds9pui8av9ai NS SOA RRSIG DNSKEY NSEC3PARAM ) lb75u4m58c2fbmgcccr6ds9pui8av9ah.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20210516042705 20210509042705 1500 pki.gov. Gd9JRFk0k+m4k5PaIHP+97DUovyU/UcSDrZts2oFt2v8/zwZA9yBYey7a5/4I6lNx3xOkmhDCAkw rkBgAYxMEax7LJqM0dWUniME2YMUAifEC966HU+92KUn8cjM60UTRYTQ3Q2IFDFArem5Olvd115o nrkwzIV5W5BExTsZMBuRhrGsBcQklR4sHNwV7ovsIyuPXBsMNrMbNL6+nlo5BDJM/BEDNIpw5t69 8DXwpSYRs+KCyUpxQyjD29b9fJVRGR7zvHJdXO7JJj8o96rJNRmlDXRmSR/fxrkbA+dT9LZBGrxS /KUStXd8eI+YQ1k3CKnpSohkq5QT5BAOeDrjXQ== ) lb75u4m58c2fbmgcccr6ds9pui8av9ah.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20210517015750 20210510015750 16758 pki.gov. MN1V6S4obcS1jaNzNOLLIzZ7S/UK/UEsxWlpmvoVrLN2DScRddHez5FmxM6zNt7DtMNAC+yfThOG WCjcEd+Nc83RzoF5w2qGrhrs5VOKvBBUIhs0LjbXxhn+sROeg9vNnBKvW8rK9BpPiUew2CVrgkdj TVurCwO90wYWNrqg283wcpb9NoRpRv9BayGzkoprr51uuGgLHdGPtnGuQm66hcHJ8UpAoFT6jfYu 3D3kL/r7hm3A1dGtERZYw6U4FInIaYVTDdSr8p303XWaQF/QOQOY0cEWpcmDF1MrCIfCRfH0ukxY 5mU34YjDl9YltWzD9TFUieFwYv1GDJuBUjeeBQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20210516022752 20210509022752 1500 pki.gov. clDheeS/cVlIcOAULu1W7/i4ExOgd6Bvrr4/l/6oDVkvFx1xUpP0ipy0JLR9oXGUHbeFjiwvzS3z Z/9IS+giG+iK/CV/ZdPFJToQaQPJ+pzn+vYdflrt0VXC+qgtJtsFTlBy+3F8Wb/+0Dwvu97sEq4d G8qD2Z9CuZSUPj0K0XHT9kNq3Fi0KR1EFsn2tr7x/lOXEy1hWinuJjDo++GxfgoVsKFtwSAxNRgu LkoXDX6cUtRcWneNUsQ1DvCPcdu0fKg9IXiAWDdT7uSbNR5BPKL+MGMSjDUJk6oVGdV9+yvdXv8I Ly/vutKkftGtOdLE9UDvPGu/VYII4zd2nVcPzg== )`
	`PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20210517020015 20210510020015 16758 pki.gov. oCjnSmVn6frGT8CzfgZUDLl0TN9YTefW1HBpazyLrNhQEswE5NhnHCTJ093udTiiXKiA1F5KLl08 ZmQ6KXOK8ulmLrVfHwZs0MzOQ1PA/abhkujnL/Zoyb9HPQu+85nOrkyq1gV9TwObOfTj93rtrO/m EbdeDbKGsx7XJUZBYL8hfUZlvkJd9/CBA7QPpulYVM7FXZ89H+vTy9BKdR9TnP6GL1/jTLN46uPu pgyCd0pvgGehA/YUp2waCKRcfC1Xdh6zqOwU/3VrCNToaPW4Ql+A6bH0yfdS1pKvNhu9TrH5y+CF E3YnT30k2bPU8w2OSe/3xO5y3E36egvFZmrYmQ== )`
	RRSIG=1500 and DNSKEY=1500 verifies the SOA RRset
	RRSIG=16758 and DNSKEY=16758 verifies the SOA RRset

PKI.GOV

No response from PKI.GOV nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: